[RESOLVED] - Couldn't refresh data adapter- Lookup table issue

Graylog Central (peer support)
1

Hi all,

I created a lookup table with a csv file and I get the issue:

“Couldn’t refresh data adapter”

So my lookup table doesn’t work at all. It is suppose to resolve an ip and put it in a specific field.

Do you have any idea to troubleshoot this issue and make it work ?

Many thanks,
Alex

2

Check the logs of your Graylog node(s).
:arrow_right: http://docs.graylog.org/en/2.4/pages/configuration/file_location.html

3

Hello,

I did, ''Couldn’t refresh data adapter" came from my log file.

2018-06-05T12:01:41.489+02:00 ERROR [LookupDataAdapter] Couldn't refresh data adapter <switches_lookup_cache/5b11622368cb5c7ed8af88f4/@7793c60d>
java.lang.NullPointerException: null
        at org.graylog2.lookup.adapters.CSVFileDataAdapter.doRefresh(CSVFileDataAdapter.java:102) ~[graylog.jar:?]
        at org.graylog2.plugin.lookup.LookupDataAdapter.refresh(LookupDataAdapter.java:89) ~[graylog.jar:?]
        at org.graylog2.lookup.LookupDataAdapterRefreshService.lambda$schedule$0(LookupDataAdapterRefreshService.java:142) ~[graylog.jar:?]
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_161]
        at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [?:1.8.0_161]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180) [?:1.8.0_161]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294) [?:1.8.0_161]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_161]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_161]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_161]

Thanks

4

Yeah, except you were missing the context.

What’s the complete configuration of the “switches_lookup_cache” lookup adapter?
Also provide some example entries from the CSV file.

5

Hello,

Data Adapter:

  • title: test
  • description: test
  • name: test
  • File path: /etc/graylog/lookup-table.csv
  • check interval: 60
  • separator: ;
  • Quote character: "
  • Key column: key
  • Value column: value

Cache:

  • cache type: Node-local, in-memory cache
  • title: test cache
  • description: test cache
  • Name test cache
  • maximum entries: 1000
  • Expire after access: 60
    Expire after write: 0 (unchecked)

My csv file:

“key”;“value”
“192.168.1.1”;“SWITCH-1”

6

Please create a bug report at https://github.com/Graylog2/graylog2-server/issues and include all relevant information (including the complete and unredacted logs of your Graylog node).

7

Hello Jochen,

Ok, thanks.

Alex

8

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.